This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
File:                     djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json)
Hash identifier:          bAcXNiy2QZeLzITYrrZoKTkIAbTaIe41k9x7jhLPeKo=
Subject key identifier:   98:50:72:D4:22:07:79:F6:5F:0D:DD:F1:B9:D7:F1:A7:E4:50:72:41
Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3
Certificate issuer:       /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3
Certificate serial:       E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
Manifest number:          E7
Signing time:             Fri 05 Dec 2025 03:27:03 +0000
Manifest this update:     Fri 05 Dec 2025 03:27:02 +0000
Manifest next update:     Fri 12 Dec 2025 03:27:02 +0000
Files and hashes:         1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: VQtIU3awg/ef1WZVcaLAvxvoNT5DNnLjt0LFCd+DKB0=)
                          2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl
                          rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 03:27:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3
        Validity
            Not Before: Dec  5 03:27:02 2025 GMT
            Not After : Dec 12 03:27:02 2025 GMT
        Subject: CN=69325107-2ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0d:d7:16:19:73:22:09:4b:ad:03:b1:da:06:
                    a5:f1:76:c3:cc:30:3a:9d:c2:6f:24:53:c2:4f:b6:
                    1d:66:8a:77:56:28:63:eb:cf:24:a8:3c:0f:4e:9d:
                    db:9d:87:93:f9:75:6b:a6:38:a6:1a:f9:bb:3a:50:
                    c7:39:9c:40:a8:8c:20:a9:a7:5c:ae:ba:db:07:6d:
                    75:a3:91:bd:29:bb:ae:fd:b7:42:15:52:91:f2:ac:
                    bd:65:6f:46:43:f9:e2:47:fe:b2:12:61:80:9b:af:
                    aa:79:d8:7f:62:32:60:2a:df:09:e1:43:50:af:b4:
                    8c:7d:d2:49:5b:6b:5d:ac:7b:0e:bf:20:01:a6:e9:
                    e8:76:23:5b:30:4c:aa:65:ac:89:15:9e:a0:ce:3d:
                    13:ce:ca:df:da:03:31:05:db:7a:26:cd:a6:e6:b3:
                    50:be:b3:5f:2d:ea:17:c0:98:71:7f:30:ce:3a:4c:
                    a3:1d:10:18:7f:8a:ab:d8:17:0c:06:53:c0:05:ee:
                    82:7b:2e:29:49:a4:3d:98:6f:a3:a7:73:28:f9:f4:
                    04:65:78:e2:0f:62:7e:90:55:21:32:3a:d2:91:e6:
                    f5:26:50:39:38:d4:5c:cd:8e:fb:d4:2e:6d:35:9b:
                    45:ec:ff:8d:f7:3a:9b:a7:b9:0f:34:1a:fd:90:84:
                    d8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:50:72:D4:22:07:79:F6:5F:0D:DD:F1:B9:D7:F1:A7:E4:50:72:41
            X509v3 Authority Key Identifier:
                keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:b5:3e:8e:ef:d1:86:bb:0c:69:b0:03:df:8d:67:39:6a:
         27:00:d0:af:2d:2a:94:de:91:98:27:b5:1d:66:fe:29:61:90:
         df:8d:fd:0b:80:60:a6:0c:57:5d:54:dd:13:e3:56:c3:37:35:
         22:c5:25:15:08:78:43:92:ba:86:ca:76:05:9b:d5:06:3f:eb:
         0c:3b:b3:34:04:29:e2:82:28:c7:e9:17:c8:c0:ae:2f:23:0e:
         4a:76:33:37:41:2c:34:0d:e3:c2:18:bb:fe:4d:c0:1a:f4:20:
         47:92:9e:ff:aa:5b:8f:e3:c9:d3:ff:00:12:94:30:43:a9:83:
         10:e0:99:a3:5f:8e:ca:7f:f1:00:41:fc:52:8c:29:aa:ea:b3:
         48:e2:82:a3:11:bd:32:cd:7b:9c:60:11:8f:61:7c:f8:8a:0b:
         01:0a:d0:35:75:2a:1a:e1:40:4e:c8:64:86:6c:bf:a0:f9:0b:
         e0:09:1e:7d:69:cc:19:6d:71:dd:73:74:34:31:36:78:5f:cd:
         bd:a3:bb:53:fc:db:f8:46:aa:4e:df:29:77:33:61:14:74:2e:
         ae:8b:6c:e9:08:7b:83:f2:3b:0c:ab:1c:a1:4c:dc:ad:cd:ab:
         b0:47:93:89:db:cc:81:1c:67:e7:e4:72:97:55:d7:05:f7:96:
         04:c8:ce:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz
REZGNDU2QzMwHhcNMjUxMjA1MDMyNzAyWhcNMjUxMjEyMDMyNzAyWjAYMRYwFAYD
VQQDEw02OTMyNTEwNy0yYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyg3XFhlzIglLrQOx2gal8XbDzDA6ncJvJFPCT7YdZop3Vihj688kqDwPTp3b
nYeT+XVrpjimGvm7OlDHOZxAqIwgqadcrrrbB211o5G9Kbuu/bdCFVKR8qy9ZW9G
Q/niR/6yEmGAm6+qedh/YjJgKt8J4UNQr7SMfdJJW2tdrHsOvyABpunodiNbMEyq
ZayJFZ6gzj0Tzsrf2gMxBdt6Js2m5rNQvrNfLeoXwJhxfzDOOkyjHRAYf4qr2BcM
BlPABe6Cey4pSaQ9mG+jp3Mo+fQEZXjiD2J+kFUhMjrSkeb1JlA5ONRczY771C5t
NZtF7P+N9zqbp7kPNBr9kITY8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhQctQi
B3n2Xw3d8bnX8afkUHJBMB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw
OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW
c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds
UmtXenN0LXk0S0E5XzBWc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCE4bU+ju/RhrsMabAD341nOWonANCvLSqU3pGYJ7UdZv4pYZDfjf0L
gGCmDFddVN0T41bDNzUixSUVCHhDkrqGynYFm9UGP+sMO7M0BCnigijH6RfIwK4v
Iw5KdjM3QSw0DePCGLv+TcAa9CBHkp7/qluP48nT/wASlDBDqYMQ4JmjX47Kf/EA
QfxSjCmq6rNI4oKjEb0yzXucYBGPYXz4igsBCtA1dSoa4UBOyGSGbL+g+QvgCR59
acwZbXHdc3Q0MTZ4X829o7tT/Nv4RqpO3yl3M2EUdC6ui2zpCHuD8jsMqxyhTNyt
zauwR5OJ28yBHGfn5HKXVdcF95YEyM7n
-----END CERTIFICATE-----
Generated at Sat Dec 6 19:31:37 2025 by rpki-client